Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/aec6e1-a20d-4238-b07d-1d74cf376a1d/1/CWtSFR_oMQdswTRoNjyrGO6FMLI.roa
File: CWtSFR_oMQdswTRoNjyrGO6FMLI.roa (raw, json)
Hash identifier: MBbTZ730dTK0ASvOQH3OHoTncas7XmGDjaPOjfQX5Ec=
Subject key identifier: 09:6B:52:15:1F:E8:31:07:6C:C1:34:68:36:3C:AB:18:EE:85:30:B2
Certificate issuer: /CN=ddf048ea02b7551533511bfa9040ddabe11974c6
Certificate serial: 3007C208
Authority key identifier: DD:F0:48:EA:02:B7:55:15:33:51:1B:FA:90:40:DD:AB:E1:19:74:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fBI6gK3VRUzURv6kEDdq-EZdMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/aec6e1-a20d-4238-b07d-1d74cf376a1d/1/CWtSFR_oMQdswTRoNjyrGO6FMLI.roa
Signing time: Sat 01 Jan 2022 03:56:07 +0000
ROA not before: Sat 01 Jan 2022 03:56:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206309
IP address blocks: 185.179.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 805814792 (0x3007c208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf048ea02b7551533511bfa9040ddabe11974c6
Validity
Not Before: Jan 1 03:56:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=096b52151fe831076cc13468363cab18ee8530b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:94:a1:89:b1:d5:80:41:bd:a6:80:ef:52:7f:
24:c3:4f:b5:bf:2e:9e:f1:a2:8e:6c:7a:46:a1:64:
2b:c1:b9:77:13:09:d9:dc:2f:88:f0:2c:ff:d7:ca:
12:72:79:70:4a:56:62:15:cc:9c:77:36:5c:d2:63:
fd:a0:48:8e:d9:cb:7a:76:31:18:17:af:23:a2:9c:
07:d7:2b:c2:73:db:c3:7a:84:0b:a7:a1:89:50:9b:
f8:74:90:f8:70:4b:18:df:65:08:ce:46:c8:25:ce:
9a:70:d9:04:ef:09:59:5c:0d:3e:13:5a:21:ec:fb:
6d:cc:1b:ba:7c:0f:d9:42:05:a2:a7:1c:48:b1:5b:
e8:21:63:f7:cc:92:bf:cc:23:3f:ce:43:16:cf:92:
7d:05:60:1d:b0:8f:ac:5b:f0:3e:80:a5:d0:b8:70:
ea:56:06:39:1e:29:15:62:de:04:3c:af:dc:f5:79:
c5:f6:ab:98:fd:4f:bb:ab:ef:56:37:20:6a:d0:3b:
30:cb:27:ca:b8:08:6f:9a:7f:c8:41:98:b9:02:39:
62:16:f3:47:0f:0b:e3:c6:ea:e5:ce:a8:50:ad:5e:
c3:06:b9:d8:c6:73:2a:ce:0f:84:39:64:27:f7:92:
69:cd:bd:dd:29:46:6b:dd:a6:bd:6c:c8:87:66:17:
dc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6B:52:15:1F:E8:31:07:6C:C1:34:68:36:3C:AB:18:EE:85:30:B2
X509v3 Authority Key Identifier:
keyid:DD:F0:48:EA:02:B7:55:15:33:51:1B:FA:90:40:DD:AB:E1:19:74:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fBI6gK3VRUzURv6kEDdq-EZdMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/aec6e1-a20d-4238-b07d-1d74cf376a1d/1/CWtSFR_oMQdswTRoNjyrGO6FMLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/aec6e1-a20d-4238-b07d-1d74cf376a1d/1/3fBI6gK3VRUzURv6kEDdq-EZdMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.43.0/24
Signature Algorithm: sha256WithRSAEncryption
27:d1:1f:b9:90:57:ba:f1:bf:85:2c:1a:50:81:ad:36:b0:27:
09:eb:ee:58:30:08:c9:a3:72:62:69:4c:e0:cc:53:0e:63:e1:
34:61:5c:bd:e8:81:0d:b8:04:6a:d6:cb:2f:85:b4:ca:1f:80:
0c:50:dd:d7:87:ea:72:7b:cb:ef:e3:98:22:6b:f5:bf:08:25:
c1:eb:4a:c7:71:73:3e:ad:49:56:ad:a5:99:84:17:44:8d:7d:
cf:34:c3:30:0b:d8:4b:62:a4:13:7e:d5:c7:f0:8b:e7:72:69:
c0:20:8f:4b:d2:57:71:bb:45:dd:67:8f:3a:33:0c:23:2b:86:
28:d2:e6:a2:c4:7d:17:de:c4:3d:6b:24:b2:3a:79:e0:98:f8:
68:29:6d:c0:00:0c:dc:f8:b7:c8:11:b7:c5:10:3e:4e:bf:4c:
00:46:8c:05:33:5a:72:b3:bf:49:7d:78:0b:d2:e5:46:18:b0:
e9:5f:b4:19:ee:0d:ee:f3:c8:60:8e:10:59:db:6a:58:2d:cf:
78:ee:f1:c4:03:f6:8e:dc:3e:a9:14:82:6f:07:e0:87:0f:d2:
31:92:39:18:c3:2f:70:a8:b7:0c:b8:0f:f1:4f:0b:68:76:5d:
f4:4b:81:2e:56:8c:43:0b:e7:16:ba:98:24:2e:ce:d5:b4:e9:
04:02:7e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:24 2023 by rpki-client on console-fra.rpki-client.org